multi_fix: harden peer/session handling, tighten foreign-network trust, and improve web client metadata (#1999)

* machine-id should be scoped unbder same user-id
* feat: report device os metadata to console
* fix sync root key cause packet loss
* fix tun packet not invalid
* fix faketcp cause lat jitter
* fix some packet not decrypt
* fix peer info patch, improve performance of update self info
* fix foreign credential identity mismatch handling

easytier/src/web_client/controller.rs

@@ -1,13 +1,16 @@
 use std::sync::Arc;
 
 use crate::{
-    instance_manager::NetworkInstanceManager, proto::rpc_impl::service_registry::ServiceRegistry,
-    rpc_service::api::register_api_rpc_service, web_client::WebClientHooks,
+    instance_manager::NetworkInstanceManager,
+    proto::{rpc_impl::service_registry::ServiceRegistry, web::DeviceOsInfo},
+    rpc_service::api::register_api_rpc_service,
+    web_client::WebClientHooks,
 };
 
 pub struct Controller {
     token: String,
     hostname: String,
+    device_os: DeviceOsInfo,
     manager: Arc<NetworkInstanceManager>,
     hooks: Arc<dyn WebClientHooks>,
 }
@@ -16,12 +19,14 @@ impl Controller {
     pub fn new(
         token: String,
         hostname: String,
+        device_os: DeviceOsInfo,
         manager: Arc<NetworkInstanceManager>,
         hooks: Arc<dyn WebClientHooks>,
     ) -> Self {
         Controller {
             token,
             hostname,
+            device_os,
             manager,
             hooks,
         }
@@ -39,6 +44,10 @@ impl Controller {
         self.hostname.clone()
     }
 
+    pub fn device_os(&self) -> DeviceOsInfo {
+        self.device_os.clone()
+    }
+
     pub fn register_api_rpc_service(&self, registry: &ServiceRegistry) {
         register_api_rpc_service(&self.manager, registry, Some(self.hooks.clone()));
     }

easytier/src/web_client/mod.rs

@@ -2,8 +2,8 @@ use std::sync::Arc;
 
 use crate::{
     common::{
-        config::TomlConfigLoader, global_ctx::GlobalCtx, log, scoped_task::ScopedTask,
-        set_default_machine_id, stun::MockStunInfoCollector,
+        config::TomlConfigLoader, global_ctx::GlobalCtx, log, os_info::collect_device_os_info,
+        scoped_task::ScopedTask, set_default_machine_id, stun::MockStunInfoCollector,
     },
     connector::create_connector_by_url,
     instance_manager::{DaemonGuard, NetworkInstanceManager},
@@ -62,6 +62,7 @@ impl WebClient {
         let controller = Arc::new(controller::Controller::new(
             token.to_string(),
             hostname.to_string(),
+            collect_device_os_info(),
             manager,
             hooks,
         ));

easytier/src/web_client/session.rs

@@ -69,6 +69,7 @@ impl Session {
         let inst_id = uuid::Uuid::new_v4();
         let token = controller.upgrade().unwrap().token();
         let hostname = controller.upgrade().unwrap().hostname();
+        let device_os = controller.upgrade().unwrap().device_os();
 
         let ctx_clone = ctx.clone();
         let mut tick = interval(std::time::Duration::from_secs(1));
@@ -91,6 +92,7 @@ impl Session {
                     easytier_version: EASYTIER_VERSION.to_string(),
                     hostname: hostname.clone(),
                     report_time: chrono::Local::now().to_rfc3339(),
+                    device_os: Some(device_os.clone()),
 
                     running_network_instances: controller
                         .list_network_instance_ids()